CONFIG_RISCV_USER_CFI: riscv userspace control flow integrity

General informations

The Linux kernel configuration item CONFIG_RISCV_USER_CFI:

• prompt: riscv userspace control flow integrity
• type: bool
• depends on: ( CONFIG_64BIT && CONFIG_MMU && \) && ( CONFIG_RISCV_ALTERNATIVE )
• defined in arch/riscv/Kconfig
• found in Linux kernels: 7.0-rc+HEAD

Help text

Provides CPU-assisted control flow integrity to userspace tasks. Control flow integrity is provided by implementing shadow stack for backward edge and indirect branch tracking for forward edge. Shadow stack protection is a hardware feature that detects function return address corruption. This helps mitigate ROP attacks. Indirect branch tracking enforces that all indirect branches must land on a landing pad instruction else CPU will fault. This mitigates against JOP / COP attacks. Applications must be enabled to use it, and old userspace does not get protection "for free". default y.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: